Attestations for ghcr.io/kapsl-sh/elixir@sha256:f83f88882b597ffff7ee0bffad4e3d0c180565c12d36ed871eb9ee321966ec45 Signed at seal time, amd64. Each document below was signed before this seal existed: an unsigned one is refused rather than published. Verify against the registry yourself: cosign verify-attestation --key cosign.pub \ --type ghcr.io/kapsl-sh/elixir@sha256:f83f88882b597ffff7ee0bffad4e3d0c180565c12d36ed871eb9ee321966ec45 === receipt.json ============================================ predicate https://slsa.dev/provenance/v1 document sha256:f78ea6d9e935d34232892da2f774c6a96a2300dfdc8a095a672688c66d6cde29 (3546 bytes) signature sha256:247758cbcb7dff1637d15d65aaf3786a2935f7f8f8f05a664aefc0ad9558ca47 (receipt.json.sigstore) === sbom.json =============================================== predicate cyclonedx document sha256:38e4fb28538fb21fb2c2c7c84a476df1dc1031e6012d075f9fe04c5c64461d63 (93038 bytes) signature sha256:3e9686df1f4d976736730f275ba4cad1399dd67a17e28284213f9f7640b0f8e7 (sbom.json.sigstore) === vex.json ================================================ predicate https://openvex.dev/ns/v0.2.0 document sha256:fd8be436dfe065b8671e6163c690dc3f73de06d95f7447fc1bc9fa11d7e998e4 (229 bytes) signature sha256:53fddd2a29c7f5ef9719ede2424c3c3ada9af7abe681900e8ecac807a78ff6a3 (vex.json.sigstore)